CVE-2009-1792

The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument).

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/35256
http://www.coresecurity.com/content/StoneTrip-S3DPlayers
http://www.securityfocus.com/archive/1/503887/100/0/threaded
http://www.securityfocus.com/bid/35105

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:::::::*
	cpe:2.3:a:stonetrip:s3dplayer_standalone:1.7.0.1:::::::*
	cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:::::::*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:::::::*
	cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:::::::*

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-05-29 18:30

Updated : 2024-02-28 11:21

NVD link : CVE-2009-1792

Mitre link : CVE-2009-1792

CVE.ORG link : CVE-2009-1792

JSON object : View

Products Affected

linux

linux_kernel

apple

macos

stonetrip

s3dplayer_web
s3dplayer_standalone

microsoft

windows

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2009-1792", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2009-05-29T18:30:00.203", "references": [{"url": "http://secunia.com/advisories/35256", "source": "cve@mitre.org"}, {"url": "http://www.coresecurity.com/content/StoneTrip-S3DPlayers", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/503887/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/35105", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "The system.openURL function in StoneTrip Ston3D StandalonePlayer (aka S3DPlayer StandAlone) 1.6.2.4 and 1.7.0.1 and WebPlayer (aka S3DPlayer Web) 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument (the sURL argument)."}, {"lang": "es", "value": "La funci\u00f3n system.openURL en StoneTrip Ston3D StandalonePlayer (tambien conocido como S3DPlayer StandAlone) v1.6.2.4 y v1.7.0.1 y WebPlayer (tambi\u00e9n conocido como S3DPlayer Web) v1.6.0.0 permite a atacantes remotos ejecutar comandos de su elecci\u00f3n a atrav\u00e9s de de metacaracteres del int\u00e9rprete de comandos en el primer argumento (el argumento sURL.)"}], "lastModified": "2021-09-22T14:22:18.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52C5D62C-CCD9-44A1-B120-15B462A14802"}, {"criteria": "cpe:2.3:a:stonetrip:s3dplayer_standalone:1.7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8FBC588-1328-47C7-8F41-33C969FF6373"}, {"criteria": "cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B41CBD9C-064D-41C0-9FDE-E1A6C4278A06"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52C5D62C-CCD9-44A1-B120-15B462A14802"}, {"criteria": "cpe:2.3:a:stonetrip:s3dplayer_web:1.6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B41CBD9C-064D-41C0-9FDE-E1A6C4278A06"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4C56F007-5F8E-4BDD-A803-C907BCC0AF55"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:stonetrip:s3dplayer_standalone:1.6.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52C5D62C-CCD9-44A1-B120-15B462A14802"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}